General
- Target 2026-08-05_b478b103f07cd46b046e0846be463498_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260805-hlde3sbr6w
- SHA256 cc60febf3f726e7c18019dd6d6e105bbe4945eec9aa2885d00980663ee48698e
- MD5 b478b103f07cd46b046e0846be463498
- SHA1 307fccd6e0f9a2ed0117b7e0b72e39222515cd8d
- SHA512 0d51de97c549743959e2d29d69d6add1e1346556c4f70c8e9c139353a7092820e2162aed36d418c22efd43cfb56383e29d1711b8c274396d5c7da61534fbaf7d
- SSDEEP 49152:ck7cmFdogWOq/Iay64uXx4lWiYwYrhzB/gCEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+m/uh40TrFB/yQ2xjdtFSjYp
- TLSH T1B0E52300D648C3F2C98078F46A06C7EB5A393E384727DDCB76DA2769ED252C78632657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_b478b103f07cd46b046e0846be463498_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_b478b103f07cd46b046e0846be463498_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_b478b103f07cd46b046e0846be463498_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 cc60febf3f726e7c18019dd6d6e105bbe4945eec9aa2885d00980663ee48698e
- MD5 b478b103f07cd46b046e0846be463498
- SHA1 307fccd6e0f9a2ed0117b7e0b72e39222515cd8d
- SHA512 0d51de97c549743959e2d29d69d6add1e1346556c4f70c8e9c139353a7092820e2162aed36d418c22efd43cfb56383e29d1711b8c274396d5c7da61534fbaf7d
- SSDEEP 49152:ck7cmFdogWOq/Iay64uXx4lWiYwYrhzB/gCEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+m/uh40TrFB/yQ2xjdtFSjYp
- TLSH T1B0E52300D648C3F2C98078F46A06C7EB5A393E384727DDCB76DA2769ED252C78632657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE